Exploits | OS | Link |
---|---|---|
CVE-2017-7269 | Windows | here |
Kernel 2.2.4 PrivEsc (ptrace kmod) | Linux | here |
Kernel 2.6.37 full nelson | Linux | here |
MS08-067 Python Reverse Shell | Windows | here |
MS10-015 KiTrap0D | Windows | here |
MS11-046 afd privesc | Windows | here |
MS13-053 NTUserMessageCall | Windows | here |
MS14-058 HttpFileServer 2.3 RCE (CVE-2014-6287) | Windows | here |
MS15-051 ClientCopyImage | Windows | here |
MS16-032 drivers eop | Windows | here |
MS16-135 win23k | Windows | here |
MS17-010 eternalblue | Windows | here |
Mod SSL 2.8.7 OpenSSL Exploit (openfuckV2.c) | Linux | here |
Onetwopunch - wrapper for unicorn and nmap scan
source: https://raw.githubusercontent.com/superkojiman/onetwopunch/master/onetwopunch.sh
Scan for port using nicornscan (very fast) and chain it with nmap vuln nse script scan
-
ping sweep for online hosts into list
nmap -v -sn 10.11.1-254 -oG all-hosts.txt
grep Up all-hosts.txt > online.hosts.txt
-
download onetwopunch script
wget https://raw.githubusercontent.com/superkojiman/onetwopunch/master/onetwopunch.sh
-
run script with nmap -sV option
./scripts/onetwopunch.sh -t online-hosts.txt -p all -i tap0 -n -sV
-
Once complete, navigate to output folder "ndir". Use command to formats all .xml output to html
for x in $(ls *.xml); do filename=$(echo $x | sed 's/xml/html/') && xsltproc $x -o $filename; done
wget https://raw.githubusercontent.com/superkojiman/onetwopunch/master/onetwopunch.sh
./scripts/onetwopunch.sh -t online-hosts.txt -p all -i tap0 -n -sV
-
Navigate to output folder "ndir" and formats all .xml output to html
for x in $(ls *.xml); do filename=$(echo $x | sed 's/xml/html/') && xsltproc $x -o $filename; done
Droopescan - drupal scanner
source: https://github.com/droope/droopescan
git clone https://github.com/droope/droopescan.git
cd droopescan
pip install -r requirements.txt
droopescan scan drupal -u https://10.11.1.49
Samba Checker - checks for samba version
Checks Samba version as enum4linux messed up? THanks fellow student OS-40285/rewardone
./samba_checker.sh <ipaddress> <port>